[CentOS] Deciding when to do system encryption